$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32322d3232203d3e20313331353036.roa File: 34332e3232352e3230382e302f32322d3232203d3e20313331353036.roa (raw, json) Hash identifier: N2EtPkk7qI3uz/Uk5TnyW56D/8DcEuIGRRawDv3zk3c= Subject key identifier: 3E:DD:BA:F6:D2:54:F8:D8:5D:EA:A1:CD:37:0D:F7:C6:DC:22:DC:55 Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163 Certificate serial: 1E6B1361321845C7F71E305B5A22D3FB27CF77B6 Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32322d3232203d3e20313331353036.roa Signing time: Fri 29 May 2026 08:17:11 +0000 ROA not before: Fri 29 May 2026 08:12:11 +0000 ROA not after: Fri 28 May 2027 08:17:11 +0000 asID: 131506 IP address blocks: 43.225.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6b:13:61:32:18:45:c7:f7:1e:30:5b:5a:22:d3:fb:27:cf:77:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163 Validity Not Before: May 29 08:12:11 2026 GMT Not After : May 28 08:17:11 2027 GMT Subject: CN=3EDDBAF6D254F8D85DEAA1CD370DF7C6DC22DC55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:42:1e:39:3b:98:7c:01:eb:3e:42:28:b0: 19:66:99:a5:b8:b5:c7:6b:fa:9b:72:fb:90:b3:c0: 28:e5:af:97:d6:e2:4f:5d:7c:fe:4c:ef:19:dd:93: 1d:06:cf:e2:f6:37:7f:e2:d0:6c:86:10:23:fd:a2: aa:4a:17:40:22:c8:18:0a:97:35:9c:a3:53:0e:ae: 4f:87:26:31:02:23:fe:64:6a:c4:a1:8e:ed:36:3f: 12:12:77:01:b9:6d:51:e7:34:5e:81:25:32:62:b0: 09:8a:c6:58:69:41:aa:5c:03:82:3c:c9:6a:5b:c8: c7:52:a9:66:58:b4:29:0e:79:4e:81:75:a9:86:f6: f2:78:53:58:ea:02:b4:9c:3e:92:c5:f6:d0:b9:0f: da:13:cd:f8:5d:e9:25:ad:76:9e:cf:29:f6:f9:a0: f7:4c:91:19:79:02:a8:4a:5d:9a:f7:70:57:00:8e: dd:74:3c:66:f6:ee:d4:9b:40:74:a6:a8:3c:f8:7d: c2:33:07:3b:06:f5:36:0a:f4:2b:58:89:59:cf:54: 30:20:0b:3a:8d:08:77:c8:26:11:b7:57:e5:58:4a: 11:fd:ec:3f:7d:8e:0e:44:33:50:05:a8:89:d7:7d: dd:8f:67:d8:a1:c9:d9:c6:ff:7a:46:94:5f:fc:b5: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DD:BA:F6:D2:54:F8:D8:5D:EA:A1:CD:37:0D:F7:C6:DC:22:DC:55 X509v3 Authority Key Identifier: keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32322d3232203d3e20313331353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.208.0/22 Signature Algorithm: sha256WithRSAEncryption 40:40:99:7e:72:3c:12:fd:49:12:24:89:d3:39:bc:2a:e3:dd: 2e:e5:04:de:53:94:c9:3e:fe:eb:bd:18:67:5c:d9:67:8d:c0: 8f:76:f5:7e:ec:9d:dc:d0:e9:ae:7c:58:45:78:c2:13:16:58: 29:63:0d:12:e9:96:33:a4:3a:63:35:39:22:47:25:b5:d5:69: b9:f9:14:f0:42:c2:b3:79:46:3c:22:eb:f5:03:63:28:a9:39: 4c:58:10:3e:9d:b4:30:d6:ca:52:4f:cd:52:6e:a5:d3:1f:85: 9a:f2:3f:65:4d:d4:21:ea:37:c4:ce:16:75:5c:74:5f:0a:8d: 2d:20:b2:9c:00:f6:e5:e3:20:32:f5:89:ef:94:e6:e2:f6:cb: d5:cb:ea:0e:2a:02:a2:7f:4e:7a:9a:e4:7b:42:12:88:45:32: cc:7f:a5:7c:c9:4e:aa:1b:52:d7:68:fe:85:98:fe:1e:15:f7: 65:23:c9:80:6e:f5:c0:5d:87:30:29:ee:75:72:0f:65:e8:02: 62:43:09:73:2e:7f:72:ab:fe:ed:20:7b:82:39:57:32:e2:6e: 3c:e3:2a:38:36:6f:b1:28:e8:16:3c:29:a1:b5:42:5c:23:af: 93:cf:37:db:9f:cb:5f:6c:21:0c:af:6d:4d:4f:89:e2:f4:54: b4:ca:04:d0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUHmsTYTIYRcf3HjBbWiLT+yfPd7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0 RDZENTE2MzAeFw0yNjA1MjkwODEyMTFaFw0yNzA1MjgwODE3MTFaMDMxMTAvBgNV BAMTKDNFRERCQUY2RDI1NEY4RDg1REVBQTFDRDM3MERGN0M2REMyMkRDNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaiUIeOTuYfAHrPkIosBlmmaW4 tcdr+pty+5CzwCjlr5fW4k9dfP5M7xndkx0Gz+L2N3/i0GyGECP9oqpKF0AiyBgK lzWco1MOrk+HJjECI/5kasShju02PxISdwG5bVHnNF6BJTJisAmKxlhpQapcA4I8 yWpbyMdSqWZYtCkOeU6BdamG9vJ4U1jqArScPpLF9tC5D9oTzfhd6SWtdp7PKfb5 oPdMkRl5AqhKXZr3cFcAjt10PGb27tSbQHSmqDz4fcIzBzsG9TYK9CtYiVnPVDAg CzqNCHfIJhG3V+VYShH97D99jg5EM1AFqInXfd2PZ9ihydnG/3pGlF/8tcqVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUPt269tJU+Nhd6qHNNw33xtwi3FUwHwYDVR0j BBgwFoAU7q8h8h+VHf/OjrnPKW+Pkk1tUWMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQzNjE2MjU0Nzc0NDc3MC8wL0VFQUYyMUYyMUY5NTFERkZDRThFQjlDRjI5NkY4 RjkyNEQ2RDUxNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0RDZENTE2My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ0MzYxNjI1NDc3NDQ3NzAvMC8zNDMzMmUzMjMy MzUyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMTM1MzAzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAivh0DANBgkqhkiG9w0BAQsFAAOCAQEAQECZfnI8Ev1JEiSJ0zm8 KuPdLuUE3lOUyT7+670YZ1zZZ43Aj3b1fuyd3NDprnxYRXjCExZYKWMNEumWM6Q6 YzU5IkcltdVpufkU8ELCs3lGPCLr9QNjKKk5TFgQPp20MNbKUk/NUm6l0x+FmvI/ ZU3UIeo3xM4WdVx0XwqNLSCynAD25eMgMvWJ75Tm4vbL1cvqDioCon9Oeprke0IS iEUyzH+lfMlOqhtS12j+hZj+HhX3ZSPJgG71wF2HMCnudXIPZegCYkMJcy5/cqv+ 7SB7gjlXMuJuPOMqODZvsSjoFjwpobVCXCOvk88325/LX2whDK9tTU+J4vRUtMoE 0A== -----END CERTIFICATE-----Generated at Fri May 29 22:56:57 2026 by rpki-client